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When  this  article  was  originally  written,  DOD  policy  and  military  regulations  significantly  restricted  the  use  of  the 
Internet  for  strategic  communication  purposes  in  favor  of  security.  On  25  February  2010,  DOD  published  a  policy 
embracing  a  balanced  approach  in  this  regard,  thus  supporting  the  original  thesis  of  this  article.  The  author  has 
updated  the  article  accordingly  to  provide  a  deeper  explanation  of  the  policy  decision  and  as  a  call  to  embrace  its  tenets. 
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UNITED  STATES  MILITARY  history  is  replete  with  examples  of 
preparing  for  the  next  war  by  studying  the  last  (or  current)  one.  Con¬ 
sequently,  we  often  engage  in  warfare  with  doctrine  and  processes  that  lag 
behind  current  reality.  The  result  can  be  a  prolonged  war  effort  at  great  cost 
to  national  treasure,  both  fiscal  and  human.  The  harried  development  and 
implementation  of  counterinsurgency  doctrine,  resulting  in  the  so-called 
“surge”  in  the  midst  of  the  campaign  in  Iraq,  is  but  one  example.1 

The  Army’s  introspective  consideration  of  future  warfare  in  the  late  1 970s 
and  early  1980s,  however,  is  an  exception.  Using  the  1973  Arab-Israeli 
War  as  a  harbinger  of  warfare  where  precision  weaponry  and  technologi¬ 
cal  advances  showed  the  importance  of  maneuver,  the  Army  shifted  from 
a  doctrine  of  “Active  Defense”  to  “Airland  Battle.”  However,  this  was  not 
universally  accepted.  In  a  2006  Landpower  essay,  Brigadier  General  Huba 
Wass  de  Czege  remininisced: 

In  what  developed  into  a  healthy  exchange,  [young  officers]  saw 
defensive  tactics  as  a  “fail-back  by  ranks”  approach  that  confused 
delay  and  defense,  and  would  lead  commanders  to  avoid  decisive 
engagement . . .  They  saw  it  as  reactive,  surrendering  the  initiative 
and  resulting  in  a  risky  method  of  defense.2 
The  official  history  of  the  1991  Gulf  War  describes  the  shift  to  Airland 
Battle  doctrine  as  a  prescient  decision  that  was  the  basis  of  that  dramatic 
victory  for  the  U.S.  military.3 

So  what  will  the  next  war  look  like?  No  one  has  a  flawless  crystal  ball 
to  predict  the  future,  but  even  a  cursory  consideration  of  potential  future 
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INFORMATION  AND  RISK 


A  Soldier  enters  cyberspace. 


adversaries  reveals  the  importance  placed  on 
information  as  a  strategic  asymmetric  means  to 
conduct  warfare.  The  Chinese  military  has  report¬ 
edly  hacked  into  Pentagon  military  networks.4 
The  Russian  government  allegedly  conducted  a 
major  cyber  attack  on  Estonian  infrastructure.5 
Yet  even  while  attacks  on  information  systems 
are  proving  to  be  a  threat,  reliance  on  the  Internet 
to  fight  the  “war  of  ideas”  is  increasing.  Consider 
the  so-called  “2nd  Lebanon  War”  between  Israel 
and  Hezbollah  in  the  summer  of  2006.  Hezbollah 
used  information  to  affect  perceptions  as  a  means 
to  achieve  strategic  victory,  even  going  so  far  as 
to  place  billboards  on  the  rubble  of  buildings  in 
southern  Lebanon  that  said  “Made  in  the  USA” 
(in  English).6 

The  U.S.  military  certainly  recognizes  this 
threat,  as  the  move  to  establish  a  U.S.  Cyber 
Command  demonstrates.  However,  until  recently, 


doctrine  was  lagging.  Past  policies  favored  “active 
defense”  over  “maneuver”  in  cyberspace.  And 
while  a  recent  policy  change  points  to  a  potentially 
significant  shift  in  that  equation,  the  question 
arises  whether  the  military  will  embrace  the  orga¬ 
nizational  change  necessary  to  balance  the  need  to 
protect  networks  while  going  on  the  ideological 
offensive  its  adversaries  have  embraced. 

In  the  end,  leaders  must  weigh  the  risks  involved 
to  achieve  a  balance  to  compete  in  the  information 
battlespace.  Will  they  develop  an  “Airland  Battle” 
equivalent  for  cyberspace,  or  will  they  wait  until 
the  next  war  to  strike  the  balance  at  potentially 
great  cost  to  our  Nation? 

Defining  the  Problem 

Keeping  up  with  the  definition  of  cyberspace 
can  be  a  full-time  job.  Since  2004,  the  U.S.  gov¬ 
ernment  has  presented  four  different  “official” 
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definitions.  The  Department  of  Defense  (DOD) 
currently  defines  cyberspace  as — 

a  global  domain  within  the  information 
environment  consisting  of  the  interdepen¬ 
dent  network  of  information  technology 
infrastructures,  including  the  Internet, 
telecommunications  networks,  computer 
systems,  and  embedded  processors  and 
controllers.7 

Perhaps  more  important,  cyberpower  is  “the 
ability  to  use  cyberspace  to  create  advantages  and 
influence  events  in  all  the  operational  environ¬ 
ments  and  across  the  instruments  of  power.”8  Thus, 
much  like  land,  sea,  and  airpower,  cyberpower  is 
a  weapon  of  war. 

The  DOD  definition  of  cyberspace  rightly  recog¬ 
nizes  the  importance  of  the  Internet  as  an  enabler 
of  that  domain  in  today’s  information  environment. 
The  World  Wide  Web,  as  a  subset  of  the  Internet, 
is  essentially  ungoverned,  providing  obvious 
freedoms  and  cautions.  The  web  gives  the  indi¬ 
vidual  a  voice — often  an  anonymous  voice — and  a 
potentially  vast  audience.  One  can  easily  establish, 
dismantle,  and  reestablish  a  website.  This  attribute 
makes  them  valuable  to  extremist  movements.  On 
the  other  hand,  the  same  capability  the  web  gives 
our  adversaries  is  available  to  us,  if  we  choose  to 
embrace  it.  The  National  Strategy  for  Combating 
Terrorism  notes  that  the  Internet  provides  terror¬ 
ists  cyber  safe  havens  to  “communicate,  recruit, 
train,  rally  support,  proselytize,  and  spread  their 
propaganda  without  risking  personal  contact.”  It 
also  points  out  the  opportunity  the  Internet  offers 
to  discredit  that  same  propaganda.9 

The  impact  of  Internet  technologies  on  national 
security  and  warfighting  will  not  only  increase  in  the 
future,  but  do  so  exponentially.10  Consider  the  Inter¬ 
net  as  a  significant  means  to  conduct  the  “war  of 
ideas.”  Web  logs  (blogs),  YouTube,  Google  Earth, 
and  Second  Life  are  all  “new  media” — enabling 
technologies  our  adversaries  use  to  gain  asymmet¬ 
ric  advantage  by  affecting  perceptions,  attitudes, 
behaviors,  and  ultimately  beliefs.  Social  media 
sites  such  as  Facebook  and  Twitter  have  exploded 
recently  and  are  used  for  purposes  well  beyond 
the  social  interaction  that  this  medium  implies. 
The  iPhone  may  look  like  a  phone,  but  it  has  all 
the  capabilities  of  a  desktop  computer  (and  more 
in  many  cases)  in  a  device  the  size  of  your  palm. 


There  is  no  doubt  that  technology  will  continue  to 
be  faster,  cheaper,  and  more  capable.  New  media  in 
this  context  quickly  become  “old”  media.  And  so 
a  more  timeless  definition  sees  new  media  as  any 
capabilites  that  empower  a  broad  range  of  actors 
(individuals  through  nation-states)  to  create  and 
disseminate  real-time  or  nearly  real-time  informa¬ 
tion  that  can  affect  a  broad  (regional  or  worldwide) 
audience.  Although  it  was  previously  the  exclusive 
purview  of  nation-states  and  large  multi-national 
corporations,  individuals  can  now  wield  informa¬ 
tion  as  a  strategic  means,  a  development  of  impor¬ 
tance  to  policymakers  and  warfighters. 

Future  warfighting  challenges  must  consider  the 
almost  certain  use  of  the  Internet  by  any  potential 
adversary.  Analysts  should  not  gain  a  false  sense 
of  security  based  on  limited  Internet  penetration  in 
some  of  the  most  contentious  parts  of  the  world. 
While  Africa  has  only  a  6.8  percent  Internet  pen¬ 
etration  based  on  population,  the  use  of  the  Internet 
there  grew  1,392  percent  from  2000  to  2009.  Dra¬ 
matic  growth  rates  are  similarly  occurring  in  Asia, 
the  Middle  East,  and  Latin  America.11 

Warfighters  recognize  the  requirement  to  compete 
in  cyberspace.  Increasingly,  senior  leaders  and  units 
sponsor  Facebook  pages  and  “tweet”  routinely.  The 
U.S.  Central  Command  engages  dissident  voices  by 
participating  in  blogs  that  are  critical  of  the  war  on 
terror,  noting  “with  the  proliferation  of  information 
today,  if  you’re  not  speaking  to  this  forum,  you’re 
not  being  heard  by  it.”12  The  United  States  military 
also  recognizes  the  importance  of  competing  in  the 
video  medium,  using  YouTube  to  show  ongoing 
images  of  U.S.  operations  in  the  current  theaters 
of  war.13 

On  the  other  hand,  the  U.S.  military’s  significant 
dependence  on  the  Internet  for  routine  daily  busi¬ 
ness  and  communication  creates  a  vulnerability  to 
cyber  attack.  There  are  plenty  of  people  and  organi¬ 
zations  out  there  probing  U.S.  networks.  While  the 
U.S.  repels  most  of  those  attacks,  the  failures  pro¬ 
vide  a  glimpse  into  their  impact.  China’s  People’s 

Warfighters  recognize  the 
requirement  to  compete  in 
cyberspace. 
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Liberation  Army  attacked  Pentagon  computers  in 
June  2007  apparently  following  numerous  probes 
and  caused  the  network  to  be  taken  down  for  more 
than  a  week.14  The  Chinese  are  transforming  from 
a  mechanized  to  an  “informationized”  force  and 
have  stated  they  intend  to  use  information  warfare 
“as  a  tool  of  war  [or]  as  a  way  to  achieve  victory 
without  war.”15  Retired  General  Barry  McCaffrey 
indicates  this  is  not  an  anomaly,  but  in  fact  may 
be  the  norm.  He  notes  that  all  of  our  potential 
adversaries,  as  well  as  criminal  elements,  conduct 
daily  reconnaissance  of  our  electronic  spectrum  in 
areas  critical  to  U.S.  national  security.16  In  fact,  on 
average,  U.S.  government  computer  systems  come 
under  attack  every  eight  seconds.17 

The  case  of  Estonia  may  be  a  precursor  of  what 
the  United  States  could  expect  as  it  increases  its 
reliance  on  the  Internet  for  government  and  military 
business.  Estonia  uses  some  of  the  most  advanced 
“e-government”  processes  in  the  world.  Estonians 
bank,  vote,  and  pay  taxes  online,  and  Estonia  has 
embedded  its  national  identification  cards  with 
electronic  chips,  making  them  very  efficient  and, 
as  it  turns  out,  very  vulnerable.  So  it  mattered  when 
Russian  hackers  attacked  in  the  spring  of 2007. 18  In 
fact,  some  observers  equated  that  cyber  attack  to 
an  act  of  war  in  the  Clausewitzian  sense,  with  the 
intent  to  create  mass  social  panic.19 

It  should  not  be  surprising,  then,  that  protect¬ 
ing  the  net  has  taken  on  great  importance  in  the 
Department  of  Defense  and  that  using  that  same 
net  to  get  proactive,  positive  U.S.  messages  out 
is  increasingly  significant.  A  recent  Department 
of  Defense  policy  change  has  opened  the  aper¬ 
ture  to  enable  opportunities  to  use  the  Internet  to 
counter  misinformation  and  tell  the  story  of  the 
American  military.  However,  it  remains  to  be  seen 
whether  organizational  culture  will  embrace  such 
an  approach. 

Defend:  Protecting  the  Network 

Great  effort  and  resources  go  into  protecting 
the  Internet-capable  systems  of  the  Department 
of  Defense  and  other  governmental  organizations. 
The  Department  of  Homeland  Security  established 
a  National  Cybersecurity  Center  whose  mission  is 
to  “coordinate  and  integrate  information  necessary 
to  help  secure  U.S.  cyber  networks  and  systems 
and  help  foster  collaboration  among  federal  cyber 


groups.”20  The  Department  of  Defense  has  codified 
the  process  to  protect  their  networks  in  a  concept 
called  information  assurance.  Information  assur¬ 
ance  includes 

measures  that  protect  and  defend  informa¬ 
tion  and  information  systems  by  ensuring 
their  availability,  integrity,  authentication, 
confidentiality,  and  nonrepudiation.  This 
includes  providing  for  restoration  of  infor¬ 
mation  systems  by  incorporating  protection, 
detection  and  reaction  capabilities  .  .  .  IA 
[information  assurance]  requires  a  defense- 
in-depth  approach  [emphasis  added].21 

The  Department  of  Defense  conducts  unclas¬ 
sified  computer  operations  within  a  subset  of  the 
Internet  known  as  the  “NIPRnet”  (originally  the 
nonclassified  Internet  protocol  router  network).  The 
NIPRnet  isolates  access  to  the  greater  Internet  by 
using  a  limited  number  of  portals  or  gateways.  This 
methodology  makes  the  required  “defense  in  depth” 
manageable  from  a  resource  perspective  in  that  it 
reduces  the  number  of  pathways  to  monitor  for 
attacks.  It  allows  access  to  the  Internet  to  facilitate 
efficient  business  and  command  and  control.22  But 
firewalls  and  content  filters  that  block  entrance  to 
specific  external  sites  often  limit  access  to  the  World 
Wide  Web  in  order  to  promote  work  productivity, 
support  bandwidth  requirements,  protect  operations 
security,  and  prevent  intrusion  and  compromise.  In 
the  recent  past  it  appeared  that  this  external  access 
would  become  even  more  restrictive.  Deputy  Secre¬ 
tary  of  Defense  Gordon  England  asked  Congress  for 
funds  to  build,  for  lack  of  a  better  term,  a  “DODnet” 
in  July  2008.  “Recent  attacks  from  China  on  Depart¬ 
ment  of  Defense  networks  and  systems  increase 
the  urgency  to  construct  cyber  systems  that  can’t 
be  penetrated.”23  The  trend  was  toward  increased 
security  by  locking  down  the  system,  an  approach 
that  was  at  odds  with  winning  the  war  of  ideas. 

Attack:  Getting  the  Message  Out 

Senior  military  leaders  increasingly  emphasize 
the  importance  of  “strategic  communication”  to 
compete  in  the  information  environment.  Accord¬ 
ing  to  the  Department  of  Defense,  strategic  com¬ 
munication  is 

focused  United  States  Government  pro¬ 
cesses  and  efforts  to  understand  and  engage 
key  audiences  to  create,  strengthen,  or 
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preserve  conditions  favorable  to  advance 
national  interests  and  objectives  through 
the  use  of  coordinated  information,  themes, 
plans,  programs,  and  actions  synchronized 
with  other  elements  of  national  power.24 

Thus,  strategic  communication  is  the  integration 
of  actions,  images,  and  words  to  send  a  message  to 
affect  perceptions,  attitudes,  and  behaviors.25  Actions 
send  the  loudest  messages,  but  images  and  words 
provide  context  and  often  have  significant  effects  on 
their  own.  While  strategic  communication  focuses  on 
the  cognitive  dimension  of  the  information  environ¬ 
ment,  it  relies  on  the  physical  environment  to  send  its 
messages.  Often  that  requires  ready  and  rapid  access 
to  the  Internet. 

Leaders  increasingly  point  to  the  importance  of 
using  new  media  means  and  the  Internet  to  proactively 
fight  in  cyberspace.  However,  past  anecdotal  evidence 
reveals  a  struggle  between  defending  the  networks 
and  using  them  to  actively  get  out  the  message.  U.S. 
operations  in  Iraq  shown  on  YouTube  were  among 
the  top  10  viewed  for  weeks  after  their  posting,  but 
the  Army  posted  them  only  after  senior  generals 
overcame  significant  bureaucratic  stonewalling.26 


Bandwidth  considerations  may  have  been  an  issue. 
Blogs  are  fast  becoming  the  medium  of  choice  not 
only  for  recreational,  but  for  more  serious  military 
and  political  pursuits.  Blogs  provide  a  forum  to 
tell  the  military’s  story,  often  by  the  most  cred¬ 
ible  sources — the  Soldiers,  Sailors,  Airmen,  and 
Marines  themselves — but  risk-aversion  often  sty¬ 
mies  the  effort.  Past  military  policies  in  Iraq  have 
been  restrictive  and  often  discouraged  blogging 
rather  than  encouraging  it.27  In  May  2008,  Army 
Lieutenant  Matthew  Gallagher’s  blog  “Kaboom” 
was  taken  down  by  his  leadership  after  he  recounted 
an  anonymous  exchange  between  himself  and  his 
commander  without  seeking  approval  prior  to  post¬ 
ing  it.  Before  its  demise,  the  site  received  tens  of 
thousands  of  page  views  about  the  day-to-day  life 
of  an  Army  platoon  in  the  war  zone.28  MySpace 
and  Facebook  receive  plenty  of  press  about  their 
transparency  and  the  adverse  effect  of  personal 
disclosure  in  the  wrong  hands.  On  the  other  hand, 
from  a  military  perspective  these  social  network¬ 
ing  sites  provide  an  opportunity  to  tell  a  credible 
and  contextual  story  of  military  life.  Both  blogs 
and  social  networks,  however,  present  operations 


Command  and  General  Staff  College  students  Majors  Gary  Belcher,  Dexter  Brookins,  and  Troy  Newman  work  in  the  divi¬ 
sion  main  command  post  during  the  Digital  Warfighter  Exercise,  Fort  Leavenworth,  KS,  14  February  2008. 
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security  issues  for  commanders,  rightly  concerned 
about  maintaining  the  secrecy  of  military  opera¬ 
tions,  capabilities,  and  vulnerabilities. 

Many  senior  military  leaders  acknowledge  the 
importance  of  these  new  media  tools  as  contempo¬ 
rary  military  capabilities  and  encourage  participa¬ 
tion  in  the  dialogue  that  they  facilitate.  Examples 
from  the  recent  past  point  to  a  risk  averse  climate 
at  high  levels  that  in  turn  works  against  capital¬ 
izing  on  the  network’s  potential.29  For  example,  in 
March  2008,  the  Army’s  Combined  Arms  Center 
(CAC)  at  Fort  Feavenworth,  Kansas,  submitted  a 
memorandum  requesting  an  “exception  to  policy” 
to  allow  their  officers  to  engage  in  blogging  in  the 
public  domain.30  CAC  is  commanded  by  a  three-star 
general  who  had  to  go  to  his  four-star  command  for 
that  authority.  What’s  more,  CAC  is  responsible  for 
training  and  educating  Army  leaders  in  the  use  of 
these  capabilities. 

The  Department  of  Defense  also  restricted  the 
authority  to  conduct  interactive  Internet  activities 
to  the  four-star  level  and  only  allowed  public  affairs 
officers  to  engage  in  interactive  Internet  activities 
with  journalists.31  These  policies  not  only  appled 
to  the  NIPRnet  but  also  restricted  home  use  of  the 
Internet. 

What  appears  to  be  a  significant  breakthrough, 
however,  occurred  in  February  2010  with  the 
publication  of  a  DOD  memorandum  entitled 
“Responsible  and  Effective  Use  of  Internet-based 
Capabilites.”  This  broad  policy  significantly  soft¬ 
ens  the  previous  restrictions  by  explicitly  directing 
NIPRnet  access  to  a  wide  variety  of  publicly  avail¬ 
able  collaborative  tools  and  discussion  forums.  (The 
policy  specifically  cites  YouTube,  Facebook,  and 
Twitter  among  others).  On  the  other  hand,  com¬ 
manders  at  all  levels  are  directed  to  continue  to 
defend  against  malicious  activities  and  take  action 
to  safeguard  missions.32 

This  recent  policy  seemingly  makes  sense  from  a 
perspective  of  balance.  But  it  also  presents  military 
leaders  with  a  dilemma.  They  are  responsible  for 
fighting  the  war  of  ideas  in  an  age  where  they  must 
quickly  come  up  with  proactive  messages  and  reac¬ 
tive  responses.  This  demand  calls  for  a  decentralized 
approach  to  strategic  communication  and  informa¬ 
tion  engagement.33  The  means  to  achieve  that  speed, 
the  Internet,  is  indispensable  to  the  conduct  of  daily 
business,  yet  it  is  under  continuous  surveillance  and 


attack,  causing  some  leaders  to  place  it  under  cen¬ 
tralized  control.  This  issue  tips  toward  either  point 
based  on  the  level  of  risk  a  commander  is  willing 
to  take  in  the  information  environment,  and  the 
organizational  culture  of  the  military  regarding  the 
value  of  competing  in  that  environment. 

Addressing  the  Dilemma: 
Managing  Risk,  Achieving 
Balance 

A  command  approach  focusing  on  a  “defense 
in  depth”  to  secure  the  NIPRnet  and  controlling 
outside  access  to  and  use  of  the  Internet,  while 
understandable  from  a  threat  analysis  approach, 
flies  in  the  face  of  the  tenets  of  good  strategy  and 
military  planning: 

Strategic  thinking  [is]  a  sophisticated  intel¬ 
lectual  process  seeking  to  create  a  synthesis 
of  consensus,  efforts,  and  circumstances  to 
influence  the  overall  environment  favorably 
while  managing  the  risks  involved  in  pursu¬ 
ing  opportunities  or  reacting  to  threats.34 

Therefore,  a  strategy  regarding  use  of  the  Internet 
to  influence  the  information  environment  requires 
managing  the  risk  of  attack  while  pursuing  the 
opportunities  to  compete.  The  previously  cited  defi¬ 
nition  of  cyberpower  as  the  “ability  to  create  advan¬ 
tages  and  influence  events”  in  cyberspace  appears 
to  provide  a  proactive,  offensive-minded  focus  on 
cyber-related  activities.  The  National  Strategy  for 
Combating  Terrorism  notes  the  opportunity  the 
Internet  offers  to  discredit  adversary  propaganda. 
The  June  2008  National  Defense  Strategy  discusses 
the  requirement  to  mitigate  risk — but  in  terms  of  the 
ability  to  exploit  opportunity.35  Still,  it  remains  to  be 
seen  whether  commanders  will  take  a  risk-averse 
approach  to  the  new  DOD  policy  by  establishing 
centralized  control  emphasizing  defense  of  the 
network.36 

Military  operations  rely  on  centralized  planning 
and  decentralized  execution  with  a  synchronized 
overarching  plan  that  subordinate  organizations 
adhere  to  in  their  subordinate  plans  to  achieve  desired 
ends.  Decentralized  execution  fosters  agility,  speed, 
and  responsiveness  in  a  fluid  and  constantly  chang¬ 
ing  environment.  Therefore,  if  information  is  a  key 
component  of  current  and  future  military  operating 
environments,  it  follows  that  a  centralized  plan  with 
decentralized  execution  would  hold  in  cyberspace. 
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Again,  however,  some  commands’  emphasis  regard¬ 
ing  the  Internet  may  restrict  decentralized  execu¬ 
tion,  hampering  the  ability  to  be  proactive,  agile, 
and  responsive  in  prosecuting  the  war  of  ideas. 

The  question  is  how  to  exploit  emerging  cyber 
capabilities  to  influence  perceptions,  attitudes,  and 
behaviors  while  managing  the  risk  of  surveillance 
and  attack  of  the  Internet.  It  is  important  to  consider 
the  various  reasons  given  to  limit  access  to  new 
media  means  since  they  inform  the  logic  of  those 
commands  prone  to  restricting  access:  to  promote 
work  productivity,  support  bandwidth  requirements, 
maintain  operations  security,  and  prevent  intru¬ 
sion  and  compromise.  These  examples  are  clearly 
covered  in  new  DOD  policy.  Still,  this  expansion  is 
necessary  to  provide  a  reasoned  argument  in  favor 
of  the  balanced  approach  that  policy  directs. 

Productivity.  One  argument  for  using  NIPRnet 
content  filters  to  preclude  access  to  video  upload 
sites  (e.g.  YouTube),  blogs,  and  social  networking 
sites  is  the  assumption  that  Soldiers  will  access 
them  for  personal  use  during  duty  hours,  thus 
adversely  affecting  work  productivity.  Certainly, 
that  potential  exists.  However,  the  responsibility 
to  manage  this  issue  is  leader  business,  pure  and 
simple,  and  should  be  handled  on  a  by-exception 
basis.  Content  filters  established  at  any  level  of 
command  usurp  the  responsibilities  of  leaders  in 
subordinate  organizations. 

Bandwidth  requirements.  Another  argument 
for  restricting  access  to  video  uplink  sites  is  the 
requirement  to  manage  bandwidth  requirements. 
Bandwidth  is  the  “capacity  to  move  information.”37 
It  is  a  low-density,  high-demand  item  in  providing 
command  and  control  computer  capabilities  to  the 
military.  However,  again,  leaders  decide  how  to 
distribute  any  valuable,  limited  resource  to  support 
mission  requirements  and  accomplish  the  military 
mission.38 

Operations  security.  Operations  security 
“selects  and  executes  measures  that  eliminate  or 
reduce  to  an  acceptable  level  the  vulnerabilities  of 
friendly  actions  to  adversary  exploitation.”39  Some 
leaders  worry  that  participation  by  military  mem¬ 
bers  in  blogging,  social  networking,  and  uploading 
to  video  sites  can  potentially  reveal  military  vulner¬ 
abilities.  This  risk  applies  to  both  the  NIPRnet  and 
the  Internet  where  military  members  may  conduct 
new  media  engagement  from  home.  It  is  certainly 


a  risk  borne  out  by  several  significant  violations 
in  recent  years.  However,  OPSEC  is,  and  always 
has  been,  a  commander’s  program.  Commanders 
control  the  OPSEC  environment  through  training, 
education,  and  punitive  measures  for  deliberate 
violations.  Content  filters  and  command  policies 
established  at  high  levels  to  prevent  OPSEC  viola¬ 
tions  are  restrictions  that  detract  from  the  subor¬ 
dinate  commander’s  ability  to  lead  and  achieve 
military  objectives  by  exploiting  the  capabilities 
of  the  network. 

Intrusions  and  the  threat  of  compromise  of  the 
network  itself  are,  on  the  other  hand,  valid  and 
important  concerns.  DOD  systems,  as  previously 
noted,  are  under  continuous  attack  by  nation-states, 
nonstate  actors,  criminals,  and  hackers.  Conse¬ 
quently,  the  department  was  right  to  establish  a 
system  that  reduces  gateways  to  the  Internet  and 
allows  judicious  and  continuous  monitoring,  to  pre¬ 
vent  the  downloading  of  software  that  might  harbor 
malicious  code  with  devastating  consequences  to 
the  network,  and  to  continue  to  evaluate  ways  to 
mitigate  such  risk.  Adversaries  and  criminals  alike 
continuously  adapt  to  updates  and  other  defensive 
measures. 

Managing  risk  while  providing  the  opportunity 
to  engage  effectively  and  exploit  the  opportuni¬ 
ties  the  Internet  provides  requires  a  rebalancing  of 
command  philosophy.  Leaders  and  commanders 
have  the  authority  and  resources  to  conduct  rapidly 
proactive  and  responsive  strategic  communication. 
Productivity,  bandwidth,  and  OPSEC  issues  are 
clearly  leader  business,  and  leaders  should  monitor 
subordinates  and  hold  them  accountable  for  viola¬ 
tions  of  their  guidance.  This  decentralized  approach 
assumes  risk.  Commanders  and  leaders  must  take 
steps  to  mitigate  this  risk  but  in  a  balanced  fashion. 

Lieutenant  General  William  Caldwell  says  (inter¬ 
estingly  using  a  blog  as  his  medium  of  choice) 
we  should  encourage  Soldiers  to  tell  their  stories, 
empower  them  by  underwriting  honest  mistakes, 
educate  them  on  potential  strategic  implications 


Managing  risk  ...to  engage  effec¬ 
tively...  requires  a  rebalancing  of 
command  philosophy. 
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of  engagement,  and  equip  them  to  engage  the 
new  media.40  While  Caldwell  specifically  refers  to 
physical  equipment,  one  could  reasonably  argue 
that  equally,  if  not  more  importantly,  is  equipping 
Soldiers  with  the  appropriate  command  guidance 
that  freely  allows  engagement  by  new  media  means 
while  prescribing  the  limits  of  that  interaction.  The 
new  DOD  policy,  as  it  trickles  down  to  subordinate 
commands,  should  allow  free  engagement  provided 
commanders  are  open  to  the  opportunities  and 
aware  of  the  threats. 

Conclusion 

In  August  2008,  Russia  apparently  again  con¬ 
ducted  cyber  attacks,  but  this  time  in  a  coordinated 
and  synchronized  kinetic  and  nonkinetic  campaign 
against  Georgia.41  It  is  entirely  probable  that  this 
may  become  the  norm  in  future  warfare  between 
and  among  nation-states  that  can  conduct  such 
complex  excursions.  The  case  of  Hezbollah  in  the 
2006  conflict  with  Israel  also  suggests  the  future 
strategic  use  of  the  Internet  and  new  media  to  strike 
at  domestic  and  international  audiences. 

The  information  environment  has  three  dimen¬ 
sions:  the  physical  dimension,  the  “means”  by 
which  one  sends  a  message;  the  informational 
dimension,  or  content  of  the  message;  and  the  cog¬ 
nitive  dimension,  or  the  impact  of  the  message  on 
the  perceptions,  attitudes,  and  behaviors  of  target 
audiences.42  It’s  safe  to  say  that  future  war  will 
increasingly  include  conflict  in  cyberspace  in  all 
three  dimensions. 

Exploiting  opportunity  while  managing  risk  is  the 
strategic  imperative.  A  good  military  plan,  whether 
on  land,  sea,  or  air,  will  “protect  the  force”  while 
attacking  the  enemy.  Civilian  leaders  and  military 
commanders  weigh  risk,  emplace  policies,  and  act 
to  mitigate  risk,  but  they  also  focus  on  achieving 
policy  and  military  objectives.  In  cyberspace,  this 
means  both  protecting  the  Internet  and  using  it  to 
engage. 

Considering  second-  and  third-order  effects 
when  making  decisions  is  also  important.  Given 
the  constant  threat  of  a  successful  cyber  attack 
against  U.S.  government  systems,  leaders  might 
default  to  the  no  risk  or  low  risk  option  of  strength¬ 
ening  the  virtual  walls  around  the  NIPRnet  to 
impervious  levels.  Moreover,  to  prevent  the 
potential  violation  of  operations  security,  they 


may  establish  restrictive  policies  on  the  use  of 
the  Internet.  However,  the  second-order  effect  of 
doing  all  this  is  to  significantly  reduce  the  ability 
of  leaders  and  commanders  to  engage  in  the  infor¬ 
mation  environment  using  new  media. 

Currently,  U.S.  government  and  military  strate¬ 
gies  “talk  the  talk”  in  this  regard  with  encouraging 
evidence  toward  “walking  the  walk.”  Senior  leader 
guidance  to  engage  audiences  using  new  media 
trumpets  the  beginnings  of  overcoming  a  long¬ 
standing  cultural  bias  against  using  the  Internet 
for  important  information  engagements.  New 
DOD  policy  offers  the  opportunity  to  achieve  the 
balance  necessary  to  both  exploit  and  protect  the 
Internet.  Leaders  and  commanders  are  responsible 
for  fighting  wars.  A  more  restrictive  NIPRnet  will 
not  resolve  this  dilemma  and,  in  fact,  can  have 
significant  adverse  second-order  effects.  It’s  time 
to  break  down  some  of  the  risk-averse  culture  to 
allow  “maneuver”  to  occur  so  that  leaders  at  all 
levels  can  do  their  job.  MR 
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